SecurityReason - ExploitAlert Database

	SecurityReason
News

Search

SecurityAlert

About SecurityAlert

ExploitAlert

SecurityReason Research

	WLB
WLB Database

Send to WLB

About WLB

	RSS
News

SecurityAlert

World Laboratory of Bugtraq

ExploitAlert

Apache

PHP

	Corporate
Contact

About us

	Services
SecurePHP


	Note
If you have found a vulnerability, please send to our SecurityAlert Database : secalert()securityreason()com Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive : exploit()securityreason()com

Selected Category : ExploitAlert Database

24.06.2008 -	phpDMCA 1.0.0 Multiple Remote File Inclusion Vulnerabilities
24.06.2008 -	IGSuite 3.2.4 (reverse shell) Blind SQL Injection Exploit
23.06.2008 -	BlogPHP 2.0 Remote Privilege Escalation Exploit
23.06.2008 -	HoMaP-CMS 0.1 (index.php go) Remote SQL Injection Vulnerability
23.06.2008 -	emuCMS 0.3 (fckeditor) Arbitrary File Upload Exploit
23.06.2008 -	RSS-Aggregator (display.php path) Remote File Inclusion Vulnerability
23.06.2008 -	PageSquid CMS (index.php page) Remote SQL Injection Vulnerability
22.06.2008 -	LaserNet CMS <= 1.5 Arbitrary File Upload Exploit
22.06.2008 -	LE.CMS <= 1.4 Remote Arbitrary File Upload Exploit
22.06.2008 -	CCLeague Pro <= 1.2 Insecure Cookie Authentication Vulnerability
22.06.2008 -	OFFL <= 0.2.6 (teams.php fflteam) Remote SQL Injection Vulnerability
22.06.2008 -	AJ HYIP ACME (news.php id) Remote SQL Injection Vulnerability
22.06.2008 -	Top Auction Pro (category) Remote SQL Injection Vulnerability
22.06.2008 -	phpAuction 3.2.1 (item.php id) Remote SQL Injection Vulnerability
22.06.2008 -	Joomla Component EXP Shop (catid) SQL Injection Vulnerability
22.06.2008 -	DUdForum 3.0 (forum.asp iFor) Remote SQL Injection Vulnerability
22.06.2008 -	sHibby sHop <= 2.2 (SQL/Update) Multiple Remote Vulnerabilities
22.06.2008 -	emuCMS 0.3 (cat_id) Remote SQL Injection Vulnerability
22.06.2008 -	Virtual Support Office-XP <= 3.0.29 Multiple Remote Vulnerabilities
22.06.2008 -	GL-SH Deaf Forum <= 6.5.5 Multiple Remote Vulnerabilities

	Alert
BSD libc (strfmon) Multiple vulnerabilities - 2008-03-25 Maksymilian Arciemowicz discovered a Integer Overflow vulnerability in the libc library "strfmon()" function.A vulnerability could allow an attacker who successfully exploits this vulnerability to take control of the affected BSD systems.


	Apache
» Apache-SSL memory disclosure

» Apache mod_negotiation Xss and Http Response Splitting

» Apache (mod_status) Refresh Header - Open Redirector (XSS)

» Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability



	PHP
» PHP 5.2.6 chdir(),ftok() (standard ext) safe_mode bypass

» PHP 5.2.6 posix_access() (posix ext) safe_mode bypass

» PHP 5.2.5 and prior : *printf() functions Integer Overflow

» PHP 5.2.5 cURL safe_mode bypass